Ransomware Payment Wallets
- Scam type: Malware
- Chain: Bitcoin
- Reported: 2026-04-25
- Last updated: 2026-04-25
Ransomware payment addresses used by LockBit, Conti, BlackBasta, and other ransomware groups for ransom collection and extortion.database. These wallets were identified through analysis of ransomware campaigns and victim payment tracking.
Other addresses in this report: bc1q28sms0nw7l8jz7rhn5h9xa254qrunrza4ar0kf, bc1q28t3aamgnjnuwxeq3q2uw4cahdfjfz7uvgx0pp, bc1q28uzg5dtzlgnpm678vvcajmt0e364zxme23hvu, bc1q28wppq6tn4jctwjp6df449ne7v2hvqx9hm3yd0, bc1q28xl3z54ylatk5k8u3xeg8k95naaeyrcpsxmtq, bc1q28xv93ljldk8jytxaq76n5fntjpurhvjaucrkj, bc1q28zlzukzfjz24utfv5q7y3dwm3dhxfgc2wf2v6, bc1q28zqxvaqf4gwvx0xalwm9gta6m3rfagunrpta9, bc1q29000jqtxydh8x796tqguhgxy273efx597lmva, bc1q2900gyczutmw6ue5uzr8vunydnuy5qusn4rn7x, bc1q290nj8xnanc35juy8faf2s2j6mjdpywdt0etd7, bc1q290nmuew2fg9s7ugl7ntlq3nv34trftjlf8mn6, bc1q290pt9yxjqrpw4nsex26dsa4q2uqk2p59kk89y, bc1q2922tctresvs2l76pqn2ns2rda5df6t0cl8j8n, bc1q292azuym7khh5v9e8zxesclvh6zkczrgsf7zfs, bc1q292llmwqhk4nfqm9zc5h7jyt7vfs95hra4pexr, bc1q292strqhdqpumwgwh47t967en473nycdeelg6v, bc1q2944s3f0npgg6kj5j2nkxqmjsnzv824fupydle, bc1q295sr08sjqtjprcka2m7cy5m7fr6960m4dcpmf, bc1q295z5t6falvldeghtgcagu2k8f8590rlcn3yh5 and 29 more